Re: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security problems with CSS shaders)

2011-12-10 Thread Adam Barth
On Fri, Dec 9, 2011 at 2:40 PM, Vincent Hardy vha...@adobe.com wrote: On Dec 7, 2011, at 7:29 PM, Adam Barth wrote: On Wed, Dec 7, 2011 at 7:23 PM, Vincent Hardy vha...@adobe.com wrote: @chris  So I take back my statement that CSS Shaders are less dangerous than WebGL. They are more!!! It

Re: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security problems with CSS shaders)

2011-12-10 Thread Vincent Hardy
: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security problems with CSS shaders) On Fri, Dec 9, 2011 at 2:40 PM, Vincent Hardy vha...@adobe.commailto:vha...@adobe.com wrote: On Dec 7, 2011, at 7:29 PM, Adam Barth wrote: On Wed, Dec 7, 2011 at 7:23 PM, Vincent Hardy vha

Re: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security problems with CSS shaders)

2011-12-09 Thread Vincent Hardy
On Dec 7, 2011, at 7:29 PM, Adam Barth wrote: On Wed, Dec 7, 2011 at 7:23 PM, Vincent Hardy vha...@adobe.com wrote: @chris So I take back my statement that CSS Shaders are less dangerous than WebGL. They are more!!! It seems to me that the differences are: a. It is easier to do the

Re: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security problems with CSS shaders)

2011-12-09 Thread Vincent Hardy
...@adobe.commailto:vha...@adobe.com Cc: Adam Barth aba...@webkit.orgmailto:aba...@webkit.org, webkit-dev@lists.webkit.orgmailto:webkit-dev@lists.webkit.org webkit-dev@lists.webkit.orgmailto:webkit-dev@lists.webkit.org Subject: Re: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security

Re: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security problems with CSS shaders)

2011-12-08 Thread Chris Marrin
On Dec 7, 2011, at 7:23 PM, Vincent Hardy wrote: Hello, @chris So I take back my statement that CSS Shaders are less dangerous than WebGL. They are more!!! It seems to me that the differences are: a. It is easier to do the timing portion of a timing attack in WebGL because it

Re: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security problems with CSS shaders)

2011-12-07 Thread Vincent Hardy
Hello, @chris So I take back my statement that CSS Shaders are less dangerous than WebGL. They are more!!! It seems to me that the differences are: a. It is easier to do the timing portion of a timing attack in WebGL because it all happens in a script and the timing is precise. With CSS

Re: [webkit-dev] Timing attacks on CSS Shaders (was Re:Security problems with CSS shaders)

2011-12-07 Thread Adam Barth
On Wed, Dec 7, 2011 at 7:23 PM, Vincent Hardy vha...@adobe.com wrote: @chris  So I take back my statement that CSS Shaders are less dangerous than WebGL. They are more!!! It seems to me that the differences are: a. It is easier to do the timing portion of a timing attack in WebGL because